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1 1 . (Currently Amended) A method of attempting to build credentials for a 

2 user of a device connected to a network, the method comprising: 

3 providing, to a first credential builder included in a first device 

4 . connected to the network, a first credential descriptor that describes a 

5 plurality of credentials; 

6 configuring the first credential builder based on the first credential 

7 descriptor to build at least one of the credent ials described by the first 

8 credential descriptor; 

9 using the first credential builder to attempt to build the at least one ef 

10 tho orodontials credential described by the firs! credential descriptor; 

1 1 providing sending a second credential descriptor that describes at least 

12 one credential described in the first cred ential descriptor, but not built by the 

13 first credential builder from the first credential builder to a second credential 

14 builder included in a second device connected to the network; and 

15 configuring the second credential builder bas ed on the second 

16 credential descriptor to build at least o n e of the credentials described by the 

17 second credential descriptor: and 

18 using the second credential builder to attempt to build the at least one 

19 credential described by the second credential descriptor providod to the 

20 oooond crodontia l bu i lder . 

1 2. (Currently Amended) The method of claim 1 further including: 

2 providing the credentials built using the first and second credential 

3 builders to a credential evaluator included in the first device or the second 

4 device; and 

5 evaluating the built credentials by using the credential evaluator to 

6 determine whether the built credentials satisfy the first credential descriptor 

7 for the device. 

1 3. (Currently Amended) The method of claim 1 further including: 

1 
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2 providing the credentials built using the first and second credential 

3 builders to a credential evaluator included in a device connected to the 

4 network that is different from the first and second devices; and 

5 evaluating the built credentials by using the credential evaluator to 

6 determine whether the built credentials satisfy the first credential descriptor 

7 for the device. 

1 4. (Currently Amended) The method of claim 1 further including: 

2 providing sending a third credential descriptor that describes at least 

3 one credential not built in the second building step from the second credential 

4 builder to the first credential builder, and 

5 attempting to build credentials corresponding thereto by using the first 

6 credential builder. 

1 5. (Currently Amended) The method of claim 1 further including: 

2 providing sending a third credential descriptor that describes at least 

3 one credential not built by using either the first or the second credential 

4 builder from the second credential builder to a third credential builder included 

5 in a device connected to the network that is different from the first and second 

6 devices; and 

7 using the third credential builder to attempt to build at least one 

8 credential described by the third credential descriptor prov i d o d to tho third 
g crodont i al bu il d ef. 

1 6. (Currently Amended) The method of claim 1 further including generating 

2 the first credential descriptor for the device. 

7-10 (Canceled). 



2 
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1 11. (Currently Amended) A method of attempting to build credentials for a 

2 user of a device, the method comprising 

3 providing a master credential descriptor including a t least one 

4 credential descriptor to a master credential builder that includes a plurality of 

5 credential builders, each of which: 

6 A) is associated with a respective credential type; 

7 B) takes an input that includes an input set of z e ro or mor e 

8 credentials and an input credential descriptor that 

9 describes at least one credential to be built; 

10 C) attempts to build a given credential described by the 

n credential builder if the given credential is of the credential 

12 type associated with that credential builder; and 

13 D) generates an output that includes: 

14 j) an output set of credentials that includes the input 

15 set of credentials as well as any credential that that 

16 credential builder has been successful in building; 

17 and 

18 jj) an output credential descriptor that describes each 

19 credential described by the input credential 

20 descriptor that that credential builder has not been 

21 successful in building, 



22 the credential builders being dynamically selected based on credential 

23 descriptors in the master credential descriptor and being linked in a series 

24 based on credential descriptors in the master credential descripto r in such a 

25 manner that the input credential descriptor and set of credentials of each 

26 credential builder but the first credential builder in the series include the 

27 output credential descriptor and set of credentials of the preceding credential 

28 builder; and 

29 employing the master credential builder to attempt to build at least one 

30 credential described by the master credential descriptor. 



3 
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1 12. (Previously Presented ) The method of claim 11 wherein, if the 

2 master credential builder has built credentials as a result of having 

3 attempted to build credentials, the method further includes: 

4 providing the credentials built by using the master credential builder 

5 to a master credential evaluator that includes a plurality of credential 

6 evaluators for evaluating a corresponding plurality of different types of 

7 credentials for the device; and 

8 using the master credential evaluator to evaluate the credentials 

9 provided thereto to determine whether those credentials satisfy the 
10 credential descriptor for the device. 

1 13. (Previously Presented) The method of claim 11 further including 

2 generating the credential descriptor for the device. 

14-16 (Canceled). 



1 17. (Currently Amended) A method of attempting to build credentials for a 

2 user of a device, the method comprising: 

3 providing a master credential descriptor including at least one 

4 credential descriptor to a master credential builder, the master credential 

5 builder including at least one credential builder that: 

6 A) is associated with a respective credential type; 

7 B) takes an input that includes an input set of zoro or mor e 

8 credentials and an input credential descriptor that describes at 
g least one credential to be built; 

10 C) attempts to build a given credential described by the credential 

11 builder if the given credential is of the credential type associated 

12 with that credential builder; and 

13 D) generates an output that includes: 



4 
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14 i) an output set of credentials that includes the input set of 

15 credentials as well as any credential that that credential 

16 builder has been successful in building; and 

17 ii) an output credential descriptor that describes each 

18 credential described by the input credential descriptor that 

19 that credential builder has not been successful in building; 

20 dynamically adding at least one different credential builder to the 



21 master credential builder based on credential descriptors in the master 

22 credential descriptor to form a modified master credential builder in such a 

23 manner that the credential builders are so linked in a series that the input 

24 credential descriptor and set of credentials of each credential builder but the 

25 first credential builder in the series include the output credential descriptor 

26 and set of credentials of the preceding credential builder; and 



27 using the modified master credential builder to attempt to build 

28 credentials corresponding to at least one of the plurality of credential 

29 descriptors. 

1 18. (Currently Amended) The method of claim 17 further including: 

2 providing the credentials built by the modified master credential builder 

3 to a master credential evaluator; 

4 forming a modified master credential evaluator by adding to the master 

5 credential evaluator different credential evaluators corresponding to at least a 

6 portion of the credentials provided in the master credential descriptor to the 

7 master credential evaluator; and 

8 evaluating the credentials corresponding to at least one of the 

9 credential evaluators by using the modified master credential evaluator. 

1 1 9. (Previously Presented) The method of claim 1 8 further including 

2 removing credential evaluators that do not correspond to at least one of 

3 the credentials from the master credential evaluator. 



5 
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1 20. (Previously Presented) The method of claim 17 further including 

2 generating the credential descriptor for the device. 



1 21 . (Currently Amended) A method of attempting to build credentials for a 

2 user of a device, the method comprising: 

3 providing a master credential descriptor including at least one 

4 credential descriptor to a master credential builder, the master credential 

5 builder including a plurality of credential builders, each of which: 

6 A) is associated with a respective credential type; 

7 B) takes an input that includes an input set of zoro or moro 

B credentials and an input credential descriptor that describes at 

9 least one credential to be: built; 

10 C) attempts to build a given credential described by the credential 

11 builder if the given credential is of the credential type associated 

12 with that credential builder; and 

13 D) generates an output that includes: 

14 i) an output set of credentials that includes the input set of 

15 credentials as well as any credential that that credential 

16 builder has been successful in building; and 

17 jj) an output credential descriptor that describes each 

18 credential described by the input credential descriptor that 

19 that credential builder has not been successful in building, 

20 the credential builders being linked in a series in such a manner that the input 

21 credential descriptor and set of credentials of each credential builder but the 

22 first credential builder in the series include the output credential descriptor 

23 and set of credentials of the preceding credential builder; 

24 dynamically removing at least one of the credential builders from the 

25 master credential builder based on the credential descriptors in the master 

26 credential descriptor to form a modified master credential builder; and 



6 
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27 using the modified master credential builder to attempt to build 

28 credentials corresponding to at least one of the credentials described by the 

29 credential descriptor. 

22-30. (Canceled) 

1 31 . (Currently Amended) Apparatu s An apparatus used to attempt to build 

2 credentials for a user of a device connected ip a network, comprising: 

3 means for generating for the device a first credential descriptor that 

4 describes a plurality of credentials; 

5 means for providing the first credential!descriptor to a first credential 

6 builder; 

7 means for configuring the first credential builder based on the first 

8 credential descriptor to build at least one of the credentials described by the 

9 first credential descriptor; 

10 means for using the first credential buijder to build the at least s no of 

1 1 th o cr e d e ntia ls credential described by the fifct credential descriptor; 

12 means for prov i ding sending to a second credential builder a second 

13 credential descriptor that describes at least one credential described in the 

14 first credential descriptor, but not built i n tho f i rst bu il d i ng st e p bv the first 

15 credential builder ; a**4 | 

16 means for configuring the second credential builder based on the 

17 second credential descriptor to build at least lone of the credentials described 

18 bv the second credential descriptor: and I 

19 means for using the second credential jbuilder to build at the least one 

20 credential described by the second credential! descriptor provid e d to th e 

21 s e cond crod o nt i a l bu il d e r ; 

22 wherein the first credential builder and; the second credential builder are 

23 included in different devices connected to the network. 



■ \ \ 
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32. (Currently Amended) A method of eval 

device, comprising: j 

I 



providing a master credential [descriptor 
the device to a master credential evaluator i 
evaluators, each of which: 



and a plurality of credentials for 
deluding a plurality of credential 



A) 
B) 



is associated with a respective; 
takes an input that includes an: 
and an input credentialWscripjftfr 



"f 

credential to be evaluated; 

! ! 

C) attempts to evaluate a piyen c 



given credential is described by 
of the credential type associate 



r^bential in the input set if the 
the credential descriptor and is 
with that credential evaluator; 



and 



1 



D) 



generates an output that 
an output credential descriptor! 
is described by the inp|t crede|rh 
successfully been evaluated by 
the credential evaluators being dynamically! 



credential descriptor and being linked ;in a $ 
input credential descriptor and set d!f credef fi 



series 



but the first credential evaluator in tjie 
descriptor and set of credentials of ihe 

evaluating the plurality of credentials! 
evaluator to determine whether the 
credential descriptor. 



Dlurality 



33. (Currently Amended) A methgd of evaluating credentials for a user of a 
device, comprising the steps of: 

providing a master credential 
the device to a master credential eyaluator 
evaluator, each of which: 



jating credentials for a user of a 



redential type; 

f put set of at least one credential 
that describes at least one 



@009 



includes the input set of credentials and 
tat describes each credential that 
ial descriptor but has not 
hat credential evaluator, 
delected based on the master 



ries in such a manner that the 
ials of each credential evaluator 
include the output credential 
preceding credential evaluator; and 
c y using the master credential 
of credentials satisfies the master 



descriptor and a plurality of credentials for 
Deluding at least one credential 
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A) is associated with a respective credential type; 

B) takes an input that incli d^s an input set of at least one credential 

descriptor that describes at least one 

4 



and an input credential 
credential to be evaluk 



forming a modified credent?^ 
one credential evaluator to the mas 
master credential descriptor in sudh 



C) attempts to evaluate $ jivjen credential in the input set if the 
given credential is desc ritjed by the credential descriptor and is 

■! i 

of the credential type ja$s<j>ciated with that credential evaluator; 
and 

D) generates an output th|t includes the input set of credentials and 

! j 

an output credential die sceiptor that describes each credential that 
is described by the injpiit credential descriptor but has not 
successfully been evaluated by that credential evaluator; 



J 

34. (Currently Amended) A method; 



I ^valuator by dynamically adding at least 
er credential evaluator based on the 
a planner that the credential evaluators 
are so linked in a series that the ifiplbt Credential descriptor and set of 
credentials of each credential evaiu ate r but the first credential evaluator in the 

descriptor and set of credentials of the 

preceding credential evaluator; arid 

evaluating at least one of ih i credentials by using the modified master 
credential evaluator to determine wjiefher the at least one credential satisfies 
the master credential descriptor. 



of 



evaluating credentials for a user of a 



device, comprising the steps of: 

providing a master credential :Jd<fescriptor and a plurality of credentials for the 
device to a master credential evaluajojf iricluding a plurality of credential evaluators, 
each of which: 

A) is associated with a rjprptictive credential type; 
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B) takes an input that injcljudes an input set of at least one credential 
and an input credential djescriptor that describes at least one 
credential to be evaluated; 

C) attempts to evaluate a=gi^en credential in the input set if the 
given credential is dgsbr bed by the credential descriptor and is 
of the credential typ^ 4 Si;ociated with that credential evaluator; 
and |f j 

D) generates an outpgt |h;at includes the input set of credentials and 
an output credential descriptor that describes each credential that 
is described by the input credential descriptor but has not 
successfully been eyajucted by that credential evaluator, 



the credential evaluators being lirikec 



in a series in such a manner that the 



input credential descriptor and s« of credentials of each credential evaluator 



1 - 

but the first credential evaluator in jthu series include the output credential 
descriptor and set of credentials j>fjtre preceding credential evaluator; 

dynamically removing at least bn 3 of the credential evaluators from the 
master credential evaluator based onlthe master credential descriptor to form a 



modified master credential evaluate n jar d 

evaluating at least one of the credentials by using the modified master 
credential evaluator to determine wither the at least one credential satisfies the 
master credential descriptor. 



10 
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